Rich888 Privacy Policy – Data Protection for Malaysian Players

1. Personal Information We Collect

Rich888 collects only the information necessary to provide you with a safe, fair, and enjoyable betting experience. We do not collect excessive or irrelevant data. The following are the types of information we collect:

Information you provide directly:

• Full name as shown on your identification card or passport.
• An active Malaysian mobile phone number.
• A valid email address.
• Date of birth (for age verification – players must be 18 or above).
• Bank account or digital wallet information (for processing deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX Maybank2u, or CIMB Clicks).
• A copy of your identification document if requested for KYC (Know Your Customer) verification purposes.

Automatically collected information:

• IP address and approximate location information.
• Device type, operating system, and web browser you are using.
• Platform activity records including betting history, login and logout timestamps.
• Technical data such as error logs and crash reports for platform improvement purposes.
• Cookie and similar tracking technology information (see Section 5).

2. How We Use Your Information

Rich888 uses your personal data solely for stated and legitimate purposes. Below is a summary of how we use your data:

Rich888 does not use your data to make automated decisions that carry legal consequences or have a significant impact on you without human involvement in the process.

3. Sharing Information with Third Parties

Rich888 does not sell, rent or trade your personal information to third parties for marketing or commercial purposes. However, there are limited situations in which we may need to share your data:

• Payment service provider: To process your deposits and withdrawals via your chosen Malaysian payment method. These providers are bound by strict data protection agreements with rich888.
• Technology service provider: Companies that help operate the technical infrastructure of the rich888 platform, such as hosting and CDN services. They access only the data necessary to carry out their technical functions.
• KYC service provider: For identity and age verification as required by law. Data shared is kept to the minimum necessary for verification purposes.
• Competent authorities: We may be required by Malaysian law to disclose certain information to authorities such as the police, courts, or regulatory bodies when lawfully directed to do so.
• Fraud and financial crime prevention: Where there is strong evidence of fraudulent activity, money laundering or financial crime, rich888 may share relevant information with the appropriate authorities.

In all of the above data-sharing scenarios, rich888 ensures that recipients are bound by confidentiality and data protection obligations that are equivalent to or exceed the standards we apply ourselves.

4. rich888 Data Security Measures

The security of your data is rich888's top priority. We continually invest in security technologies and procedures to ensure your information remains protected at all times. Key measures we have in place include:

• 256-bit SSL Encryption: All communications between your web browser or app and the rich888 servers are encrypted using TLS 1.3 with the strongest available cipher suites.
• Data encryption at rest: Sensitive data stored in our databases is encrypted using AES-256 standards, ensuring it remains unreadable even in the event of unauthorised access.
• Internal access controls: rich888 staff only have access to the data required to perform their specific duties. The principle of least privilege is enforced at all levels.
• Two-factor authentication (2FA): We strongly encourage all members to enable 2FA for account access. rich888's internal systems require 2FA for all sensitive operations.
• 24/7 security monitoring: An automated threat monitoring system and a dedicated security team keep watch over the rich888 platform around the clock to detect any suspicious activity.
• Periodic penetration testing: Rich888 conducts regular security audits carried out by independent security experts to identify and address any vulnerabilities before they can be exploited.

5. Cookies & Tracking Technologies

Rich888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the rich888 platform and prevent you from logging in or completing transactions.

6. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act (PDPA 2010), you have the following rights regarding the personal data held by rich888. To exercise any of these rights, contact us at support@rich888.fun with the email subject line "Data Subject Rights Request".

7. Children's Data Protection

The rich888 platform is not intended for individuals under the age of 18. We do not knowingly collect or store personal data from minors. Should we discover that someone under 18 has provided us with personal information, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and believe that your child under the age of 18 has registered an account on rich888, please contact us immediately at support@rich888.fun so we can take the appropriate action.

8. Cross-Border Data Transfers

Rich888 operates primarily in Malaysia. However, some of our technology service providers may be based in other countries. In such cases, we ensure that any transfer of your personal data outside Malaysia is carried out in accordance with the requirements of PDPA 2010 and relevant international data protection standards.

Service providers outside Malaysia that we engage are bound by legally enforceable data processing agreements, ensuring a level of protection equivalent to Malaysian standards is maintained at all times. Rich888 does not transfer your data to any country that does not provide an adequate level of data protection.

9. Data Retention & Deletion Period

Rich888 only retains your personal data for as long as necessary for the stated purposes or as required by Malaysian law. The following are the data retention guidelines we observe:

• Active account data: Retained for as long as your rich888 account remains active.
• Data after account closure: Basic information is retained for 7 years after account closure to meet Malaysia's financial reporting and legal requirements.
• Financial transaction records: Retained for 7 years in accordance with Malaysia's financial and tax legal requirements.
• Security and activity logs: Retained for 2 years for the purposes of security incident investigation if required.
• Marketing and communications data: Retained for 3 years or until you withdraw your consent, whichever comes first.

Once the retention period has elapsed, your data will be securely deleted using data destruction methods recognised by the information security industry, ensuring it cannot be recovered by any party.

10. Amendments to This Privacy Policy

Rich888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any amendments will be published on this page with an updated revision date.

For significant amendments that materially affect your privacy rights, rich888 will notify you via your registered email address or an in-platform notification at least 14 days before the amendment takes effect. Continued use of the rich888 platform after the effective date of any amendment will be taken as your acceptance of the updated policy.

We encourage you to review this page periodically to stay informed of the latest rich888 privacy policy.

11. Contact Us About Privacy

If you have any questions or concerns, or wish to exercise any of your data subject rights in relation to this Privacy Policy, our team is ready to assist. Please reach us through the following channels:

• Privacy Email: support@rich888.fun – use the subject line "Privacy Enquiry" or "Data Subject Rights Request"
• Live Chat: Available on the rich888 platform after login – response time under 3 minutes
• WhatsApp: Number available upon logging in to your account

We will acknowledge receipt of your request within 3 business days and provide a full response within 21 business days as required under PDPA 2010. If your request is complex or involves a large volume of data, we may need up to 3 months to resolve it – and we will inform you of any such additional time requirement.